Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2be0a3e2-214e-4a58-8273-9bc3c1fcc022/c3c145228321c2bb99ff9beefd6379914f773a29.roa
File:                     c3c145228321c2bb99ff9beefd6379914f773a29.roa (raw, json)
Hash identifier:          zRTcEqr1Cfzw4U/mwhy5vYrXkcQAUlcynAK5Xr9dcJE=
Subject key identifier:   F8:0C:42:C0:C2:2D:9C:19:84:4A:5F:B2:51:52:85:30:76:95:49:C0
Certificate issuer:       /CN=3f7aac1ebb4a94b7e0894611ee24072627e16f9e
Certificate serial:       0D3C37
Authority key identifier: 55:12:0B:90:13:D3:A8:DC:DD:47:B6:84:9A:E3:8D:91:F2:6B:12:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3f7aac1ebb4a94b7e0894611ee24072627e16f9e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2be0a3e2-214e-4a58-8273-9bc3c1fcc022/c3c145228321c2bb99ff9beefd6379914f773a29.roa
Signing time:             Wed 24 Mar 2021 14:34:03 +0000
ROA not before:           Wed 24 Mar 2021 14:34:03 +0000
ROA not after:            Tue 24 Mar 2026 14:34:03 +0000
asID:                     52304
IP address blocks:        190.124.27.0/24 maxlen: 24
                          2001:1398:121::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 867383 (0xd3c37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f7aac1ebb4a94b7e0894611ee24072627e16f9e
        Validity
            Not Before: Mar 24 14:34:03 2021 GMT
            Not After : Mar 24 14:34:03 2026 GMT
        Subject: CN=c3c145228321c2bb99ff9beefd6379914f773a29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:ce:71:a2:98:53:3f:43:70:c7:03:31:fc:01:
                    57:59:81:95:02:cc:eb:2b:3a:57:e9:c1:a2:20:30:
                    4b:bb:93:c5:a5:60:e1:00:1a:a2:cb:96:f5:93:3b:
                    73:0f:c1:11:21:0d:17:77:d5:54:eb:b1:af:0d:69:
                    ae:76:dc:8d:2b:04:d2:d7:4c:43:c0:6b:19:ba:99:
                    db:95:48:89:4b:4c:14:74:8d:0f:6a:23:33:6d:df:
                    02:1a:7d:3b:f4:0e:9f:7e:06:c8:33:80:19:73:ae:
                    cd:90:51:91:d0:ee:8b:4d:48:01:fd:dd:af:40:21:
                    ad:e2:25:87:fc:05:e2:8f:fa:7f:e6:17:bd:4a:08:
                    5a:20:ab:b1:43:39:b7:e3:80:95:5d:6e:22:9d:97:
                    e0:f3:49:0b:94:c0:09:4c:cb:9e:5d:80:19:7c:98:
                    5f:46:c3:1f:bd:45:1f:6c:21:f5:7e:bc:b3:1c:76:
                    e6:9d:eb:fb:07:26:5d:6f:07:73:c2:26:8f:28:f3:
                    b5:98:37:58:17:af:6d:27:35:d8:fa:c3:6e:0e:f5:
                    68:3b:53:0e:e8:02:e8:aa:8d:5a:c0:7c:f0:92:fd:
                    59:bb:bf:d2:11:6c:3b:d3:ab:9b:47:09:02:12:3b:
                    37:b5:fc:a3:d2:17:9b:62:9f:81:73:4a:3f:2b:43:
                    49:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:0C:42:C0:C2:2D:9C:19:84:4A:5F:B2:51:52:85:30:76:95:49:C0
            X509v3 Authority Key Identifier:
                keyid:55:12:0B:90:13:D3:A8:DC:DD:47:B6:84:9A:E3:8D:91:F2:6B:12:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3f7aac1ebb4a94b7e0894611ee24072627e16f9e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2be0a3e2-214e-4a58-8273-9bc3c1fcc022/c3c145228321c2bb99ff9beefd6379914f773a29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2be0a3e2-214e-4a58-8273-9bc3c1fcc022/3f7aac1ebb4a94b7e0894611ee24072627e16f9e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.124.27.0/24
                IPv6:
                  2001:1398:121::/48

    Signature Algorithm: sha256WithRSAEncryption
         64:92:4e:cc:b1:2d:f2:77:c7:82:dd:4f:42:32:27:ee:28:fe:
         a2:dc:48:a3:5c:ae:fd:c2:d4:b9:7b:08:8c:88:ca:72:1c:1f:
         c0:ef:33:a1:5e:4c:b1:b7:71:3d:d9:bc:fa:fe:0c:24:d5:c7:
         30:78:1f:35:83:dd:07:41:be:87:b6:45:c5:24:29:45:73:28:
         fb:52:d4:33:3c:1d:c7:21:66:3d:45:98:34:1b:5b:a9:89:9d:
         39:ce:81:ac:62:44:ae:39:dc:f5:69:e5:8f:52:c3:b5:e1:e1:
         72:81:38:af:5f:59:98:e3:d5:cf:17:13:12:20:3c:d2:bc:de:
         a1:ef:43:e4:91:42:77:ec:09:65:8d:33:8f:5e:8c:42:75:af:
         59:5d:1c:98:c9:09:bf:91:8e:93:65:49:bb:7e:12:ba:5b:91:
         f6:72:61:d6:65:05:3a:9c:ea:ff:7b:f2:93:f5:78:1b:da:70:
         43:bf:24:55:a2:c7:63:33:f9:92:90:7d:a5:1d:b5:a3:06:e3:
         38:87:27:13:15:fa:55:02:6f:75:d8:3f:42:0c:b3:18:ab:c9:
         83:e0:97:c5:af:e7:b4:51:7b:5f:92:05:6e:bb:fb:b2:c6:0b:
         99:e1:c3:53:c9:ec:16:57:af:ab:8e:af:11:65:b2:70:bf:af:
         92:d6:e0:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----